PT-2026-70319 · Git+1 · Neural Compressor
CVE-2026-20913
·
Published
2026-08-11
·
Updated
2026-08-31
CVSS v3.1
5.3
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Intel(R) Neural Compressor versions prior to v3.7
Description
Improper input validation within Ring 3: User Applications allows an authenticated, unprivileged local adversary to escalate privileges. This low-complexity attack requires no user interaction or special internal knowledge and may result in low impacts on the confidentiality, integrity, and availability of the vulnerable system.
Recommendations
Update Intel(R) Neural Compressor to version v3.7 or later.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Neural Compressor